Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source Rule Status Updated
suricata ET WEB_SPECIFIC_APPS Hubscript XSS Attempt rev 8 2024-03-06
suricata ET INFO Hotmail Access Full Mode rev 6 2024-03-06
suricata ET INFO HTTP Request to a *.co.tv domain rev 6 2024-03-06
suricata ET INFO Unsupported/Fake FireFox Version 1. rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS Hubscript PHPInfo Attempt rev 8 2024-03-06
suricata ET ADWARE_PUP overtls.com adware request rev 6 2024-03-06
suricata ET SCAN WebShag Web Application Scan Detected rev 8 2024-03-06
suricata ET WEB_SERVER Possible WebLogic Monitor Login With Default Creds rev 5 2024-03-06
suricata ET WEB_SERVER JBoss jmx-console Probe rev 4 2024-03-06
suricata ET INFO HTTP Request to a *.us.tf domain rev 6 2024-03-06
suricata ET EXPLOIT Possible dlink-DSL2640B DNS Change Attempt rev 5 2024-03-06
suricata ET WEB_SERVER SQL sp_start_job attempt rev 8 2024-03-06
suricata ET MALWARE ATTACKER IRCBot - PRIVMSG Response - Directory Listing *nix rev 6 2024-03-06
suricata ET WEB_SPECIFIC_APPS millionpixel payment.php order_id XSS attempt rev 7 2024-03-06
suricata ET WEB_SPECIFIC_APPS ShopMaker product.php id Parameter Remote SQL Injection rev 7 2024-03-06
suricata ET MALWARE Linux.Trojan.IptabLex Variant Checkin rev 2 2024-03-06
suricata ET EXPLOIT_KIT Redirect to driveby sid=mix rev 4 2024-03-06
suricata ET MALWARE US-CERT TA14-353A Lightweight Backdoor 5 rev 3 2024-03-06
suricata ET MALWARE Backdoor.TurlaCarbon.A C2 HTTP Request rev 4 2024-03-06
suricata ET MALWARE Trojan-Dropper.Win32.StartPage.dvm or Mebromi Bios Rootkit CnC Count Checkin rev 8 2024-03-06
suricata ET ACTIVEX 4XEM VatDecoder VatCtrl Class ActiveX Control Url Property Buffer Overflow Vulnerability rev 9 2024-03-06
suricata ET NETBIOS Microsoft Windows SMB Client Race Condition Remote Code Execution rev 4 2024-03-06
suricata ET EXPLOIT Possible ShuttleTech 915WM DNS Change Attempt rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS PozScripts Classified Auctions id parameter SQL Injection rev 7 2024-03-06
suricata ET MALWARE Poweliks Clickfraud CnC M1 rev 4 2024-03-06
suricata ET ADWARE_PUP SurfAccuracy.com Spyware Updating rev 8 2024-03-06
suricata ET SCAN Wikto Backend Data Miner Scan rev 11 2024-03-06
suricata ET WEB_SPECIFIC_APPS AdaptWeb a_index.php CodigoDisciplina Parameter Remote SQL Injection rev 8 2024-03-06
suricata ET MALWARE ATTACKER IRCBot - PRIVMSG Response - net command output rev 6 2024-03-06
suricata ET MALWARE VBS/Wimmie.A Set rev 10 2024-03-06
suricata ET MALWARE Shady RAT Send Status Result rev 3 2024-03-06
suricata ET WEB_SPECIFIC_APPS DeluxeBB misc.php qorder Parameter SQL Injection rev 8 2024-03-06
suricata ET EXPLOIT SQL sp_configure attempt rev 3 2024-03-06
suricata ET MALWARE MS Remote Desktop edc User Login Request rev 2 2024-03-06
suricata ET WEB_SERVER Onmouseover= in URI - Likely Cross Site Scripting Attempt rev 9 2024-03-06
suricata ET MALWARE Linux/dtool IRC Command Complete 2 rev 5 2024-03-06
suricata ET WEB_SPECIFIC_APPS Wbstreet show.php id parameter Remote SQL Injection rev 7 2024-03-06
suricata ET MALWARE Bitter APT Activity - Secondary Payload Retrieval Attempt rev 1 2024-03-06
suricata ET MALWARE Miniduke Checkin rev 8 2024-03-06
suricata ET MALWARE Backdoor Win32/Hupigon.CK Client Checkin rev 3 2024-03-06